The University of Bradford disclosed an unpatched vulnerability in its student portal software, exposing sensitive data of over 12,000 students and staff. The flaw allows unauthorized access to personal records, including academic and financial information, due to a misconfigured authentication system in the institution's custom-built portal.